Skip to content
OpenAdvisories
Unscored DSA-735-2 1 CVE

sudo - pathname validation race

Published Jul 8, 2005 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 3.0 sudo 1.6.6-1.3woody1
Debian · 3.1 sudo 1.6.8p7-1.1sarge1

Vulnerabilities 1

  • Unscored —

    Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file,…